NULL Pointer Dereference in Linux Kernel's TPS6594-PFSM Module

CVE-2025-38368

What is CVE-2025-38368?

A vulnerability has been identified in the TPS6594-PFSM module of the Linux Kernel, wherein the returned value from the device management function may result in a NULL pointer dereference. To mitigate this issue, a pointer check has been introduced to ensure that the value returned by devm_kasprintf() is valid before being utilized. This precautionary measure is crucial to preventing potential system crashes or unpredictable behavior that could arise from dereferencing a NULL pointer. This fix aligns with previous updates aimed at reinforcing the stability and security of the Linux Kernel.

References